A government agency plans to increase personalization of their AI public services platform.

PMI’s guidance on responsible and trustworthy AI highlights data privacy, security, and protection of personal information as central when deploying AI in public-sector services. For personalization in e-government platforms, PMI notes that organizations must “design AI solutions that safeguard personally identifiable information (PII) and comply with applicable privacy regulations,” because public trust is especially fragile in government contexts. Strengthening privacy controls—through techniques such as data minimization, access controls, encryption, anonymization/pseudonymization, and robust cybersecurity practices—is described as a direct way to protect citizens and maintain confidence in AI-enabled services.

The PMI-CPMAI materials also emphasize that user trust is a prerequisite for adoption, particularly when AI uses sensitive personal or behavioral data. They state that AI programs should “embed privacy-by-design and security-by-design into architectures and workflows so that personalization does not compromise confidentiality or expose citizens to heightened risk.” While standardizing protocols, educating employees, and improving interfaces have value, they do not address the agency’s specific concern about hacking and misuse of personal data. Enhancing data privacy and security directly aligns with both the risk concern (hacking) and the strategic goal (personalized services that users trust), making it the action most consistent with PMI’s responsible AI and data governance guidance.